- smb: client: reject userspace cifs.spnego descriptions - ALSA: ctxfi: Limit PTP to a single page {CVE-2026-31602} - nvme-rdma: fix possible use-after-free in transport error_recovery work {CVE-2022-48788} - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails {CVE-2022-49029} - Input: powermate - fix use-after-free in powermate_config_complete {CVE-2023-52475} - cifs: Fix use-after-free in rdata->read_into_pages() {CVE-2023-52741} - ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() {CVE-2023-52988} - ftrace: Fix invalid address access in lookup_rec() when index is 0 {CVE-2023-53075} - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak {CVE-2026-43040} - ALSA: caiaq: fix stack out-of-bounds read in init_card {CVE-2026-31778} - usb: cdc-wdm: avoid setting WDM_READ for ZLP-s {CVE-2026-43427} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() {CVE-2026-43450}